diff --git a/Cargo.lock b/Cargo.lock
index 695706516b..bb72c25341 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2628,9 +2628,9 @@ dependencies = [
 
 [[package]]
 name = "flate2"
-version = "1.1.4"
+version = "1.1.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dc5a4e564e38c699f2880d3fda590bedc2e69f3f84cd48b457bd892ce61d0aa9"
+checksum = "bfe33edd8e85a12a67454e37f8c75e730830d83e313556ab9ebf9ee7fbeb3bfb"
 dependencies = [
  "crc32fast",
  "libz-rs-sys",
diff --git a/Cargo.toml b/Cargo.toml
index 8b80a83e54..fda4da8fb7 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -97,7 +97,7 @@ diesel-async = { version = "=0.7.3", features = ["async-connection-wrapper", "de
 diesel_full_text_search = "=2.3.0"
 diesel_migrations = { version = "=2.3.0", features = ["postgres"] }
 dotenvy = "=0.15.7"
-flate2 = "=1.1.4"
+flate2 = "=1.1.5"
 futures-util = "=0.3.31"
 generic-array = "=0.14.9" # see https://github.com/RustCrypto/traits/issues/2036
 hex = "=0.4.3"
diff --git a/crates/crates_io_database_dump/Cargo.toml b/crates/crates_io_database_dump/Cargo.toml
index d2bf37d059..ebed38bed8 100644
--- a/crates/crates_io_database_dump/Cargo.toml
+++ b/crates/crates_io_database_dump/Cargo.toml
@@ -10,7 +10,7 @@ workspace = true
 [dependencies]
 anyhow = "=1.0.100"
 chrono = { version = "=0.4.42", default-features = false, features = ["clock", "serde"] }
-flate2 = "=1.1.4"
+flate2 = "=1.1.5"
 minijinja = "=2.12.0"
 serde = { version = "=1.0.228", features = ["derive"] }
 serde_json = "=1.0.145"
diff --git a/crates/crates_io_tarball/Cargo.toml b/crates/crates_io_tarball/Cargo.toml
index 1bcb085294..68be8c1148 100644
--- a/crates/crates_io_tarball/Cargo.toml
+++ b/crates/crates_io_tarball/Cargo.toml
@@ -13,7 +13,7 @@ builder = ["dep:flate2", "dep:tar"]
 [dependencies]
 astral-tokio-tar = "=0.5.6"
 cargo-manifest = "=0.19.1"
-flate2 = { version = "=1.1.4", optional = true }
+flate2 = { version = "=1.1.5", optional = true }
 serde = { version = "=1.0.228", features = ["derive"] }
 serde_json = "=1.0.145"
 tar = { version = "=0.4.44", optional = true }
@@ -27,7 +27,7 @@ futures-util = "=0.3.31"
 anyhow = "=1.0.100"
 claims = "=0.8.0"
 clap = { version = "=4.5.50", features = ["derive", "unicode", "wrap_help"] }
-flate2 = { version = "=1.1.4" }
+flate2 = { version = "=1.1.5" }
 indicatif = { version = "=0.18.1", features = ["rayon"] }
 insta = "=1.43.2"
 rayon = "=1.11.0"